Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: CtRokEF58SD+cVO91Bl5uhgATLU1fVQ+kh/bs1NiWU4=
Subject key identifier: 18:90:89:C4:AE:B0:2E:72:57:15:44:6D:8F:CA:A7:62:C3:0B:07:9C
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019D999960C7883A94A373A63FAA56D9ACB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 12E3
Signing time: Fri 17 Apr 2026 04:00:58 +0000
Manifest this update: Fri 17 Apr 2026 04:00:58 +0000
Manifest next update: Sat 18 Apr 2026 04:00:58 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: ZZvpXlDeO9/g2NdzEU0Xose3UTj2q31Z6n/vjDhqsTk=)
3: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (hash: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:60:c7:88:3a:94:a3:73:a6:3f:aa:56:d9:ac:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Apr 17 04:00:58 2026 GMT
Not After : Apr 18 04:00:58 2026 GMT
Subject: CN=189089c4aeb02e725715446d8fcaa762c30b079c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:cb:42:d7:55:1b:a2:a9:b1:36:40:2b:8a:
c8:a2:1a:9f:18:28:ca:d7:76:6e:02:31:ed:fd:d1:
86:59:a0:b0:8e:f4:df:40:2b:7f:3e:1e:2d:4f:65:
fc:dd:cb:27:cd:7e:e1:e2:c7:84:1b:8f:27:72:b5:
4a:42:03:54:62:8f:e9:6a:af:55:e4:72:89:a3:7f:
78:ff:07:fa:38:4a:95:6d:c4:c5:a3:b2:fc:e6:3d:
42:28:d7:15:5f:75:58:05:47:d8:d2:24:a1:41:09:
34:9b:5f:00:f5:19:9d:48:da:2b:7e:2f:f6:e0:3c:
3f:76:02:2f:07:57:ac:44:a0:7f:c3:f6:e3:ae:83:
4a:66:40:d0:a1:36:42:bf:db:64:91:fc:f2:05:bc:
f6:df:50:9e:f2:23:50:5d:86:0e:e5:33:79:4a:0c:
99:e7:79:26:86:2f:c8:07:3c:4e:27:74:4d:7f:e9:
90:95:f5:24:73:d9:1b:f1:3a:72:58:2c:1e:2c:5e:
53:b7:29:26:e7:f8:b8:81:21:4e:d8:7d:1a:56:18:
45:24:f5:27:85:b8:47:61:f7:8c:78:1e:c1:40:8e:
84:94:5c:79:8d:79:41:b7:72:08:7a:3e:96:b2:aa:
8e:97:c0:0c:a8:bc:8d:f7:7a:44:10:e1:9c:12:58:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:89:C4:AE:B0:2E:72:57:15:44:6D:8F:CA:A7:62:C3:0B:07:9C
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:60:f9:47:dd:01:73:66:83:1d:e2:92:83:1c:88:dd:e0:63:
00:a9:2a:a7:63:4e:5e:13:f4:7a:9f:f8:60:57:84:21:ae:d1:
03:60:be:ad:80:8a:5c:07:41:91:34:c7:1d:6d:df:88:51:67:
a0:4f:fa:b4:1c:eb:cd:f6:14:6f:8b:a6:26:a6:b6:d0:f6:ae:
21:6f:f0:02:3a:68:f0:00:ca:95:bf:d0:fd:5b:07:a1:ab:38:
28:ab:10:e6:d9:31:0e:42:c6:02:5d:fd:83:c0:fa:83:5e:b3:
dc:25:1a:72:25:50:7a:d5:b4:5a:dd:d1:be:b1:60:33:3e:b4:
05:31:dc:38:b5:d4:6d:c5:aa:b5:d5:ab:17:a5:b4:97:a0:ae:
1b:f7:fd:7e:15:71:44:0d:3a:f6:6f:49:32:00:82:22:d4:e9:
61:87:a5:12:45:c8:9a:04:53:a1:14:c5:8a:77:d9:96:51:b8:
98:21:58:c5:45:67:4e:72:24:a5:55:d7:ca:4c:d1:22:30:04:
ec:1d:05:0d:82:3d:fd:ff:7a:76:35:a8:be:2e:1e:94:25:35:
40:7e:99:fa:8b:27:80:6a:f1:ca:98:d2:e4:98:02:f0:24:39:
1b:c8:0d:68:2d:2c:42:1e:22:b4:5c:b9:1d:97:f1:0d:76:73:
96:41:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:02 2026 by rpki-client